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(57) Abstract: The invention relates to a network security system, which includes a firewall configured between the mtemal 
network and the external network and a credible node configured between the firewall atid the external network, wherein the 
credible node is used to provide a data channel between the internal network and the external network and forward the 
interactive data between the internal network and the external network. The said firewall comprises the first port configured at 
the internal side of the firewall and the second port configured at external side of the firewall; the said credible node compnses a 
n\edia stream receiving port for constrmging code stream firom the second port. Because the code stream achieves convergence 
when transmitted between the credible node and the internal network, the invention could ensure that \X wouldn't increase code 
stream delay basically while the internal network is separated from the external network. The invention further discloses a 



network security method. 
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